CVE-2024-34988: Prestashop Ask For A Quote

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods `AskforaquotemodulcustomernewquoteModuleFrontController::run()`, `AskforaquotemoduladdproductnewquoteModuleFrontController::run()`, `AskforaquotemodulCouponcodeModuleFrontController::run()`, `AskforaquotemodulgetshippingcostModuleFrontController::run()`, `AskforaquotemodulgetstateModuleFrontController::run().`

Affected products

• Prestashop Ask For A Quote: before 1.0.52 (fixed in 1.0.52)

Published 2024-06-24. Last modified 2026-06-17.